Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File:                     1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier:          rtzajBYSyJUmq6wbkjohGICkld8qyR3FhOR6dcZ5WOc=
Subject key identifier:   56:21:96:30:8B:D1:D5:A0:D4:17:EE:E7:4B:35:C3:96:C3:26:06:39
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer:       /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial:       57468AABF320F702FB57D3929771725D6C3FB480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number:          26
Signing time:             Fri 06 Jun 2025 20:51:35 +0000
Manifest this update:     Fri 06 Jun 2025 20:46:35 +0000
Manifest next update:     Sat 07 Jun 2025 21:53:35 +0000
Files and hashes:         1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: rMsRol7uRuEijpTqTZ7E+Ee4Q1G/AXt/qhkL7Vet49w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:8a:ab:f3:20:f7:02:fb:57:d3:92:97:71:72:5d:6c:3f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
        Validity
            Not Before: Jun  6 20:46:35 2025 GMT
            Not After : Jun  7 21:53:35 2025 GMT
        Subject: CN=562196308BD1D5A0D417EEE74B35C396C3260639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:b9:58:a9:0b:7c:c9:63:00:f5:54:b6:62:
                    c3:8e:43:9c:a7:36:ab:2c:a2:1b:af:12:91:eb:3e:
                    db:ec:57:52:81:d4:c4:91:9c:09:d1:91:84:3d:f3:
                    f6:50:41:af:bf:d9:8c:5e:1e:c4:66:b7:af:bb:61:
                    7d:20:08:04:a1:b6:e8:7a:0e:ed:96:16:33:73:ea:
                    d1:5e:32:3e:78:b5:01:2f:6b:09:42:aa:e1:de:0b:
                    87:85:95:3e:37:0e:77:86:0d:d0:29:f7:03:7d:c0:
                    31:ea:ea:f1:cf:5a:38:37:d9:ea:dd:56:b2:f9:3b:
                    69:ec:11:d5:8e:88:b8:e1:0f:51:7a:eb:ea:04:84:
                    15:09:90:c0:38:0b:cb:b9:9b:c6:e8:7f:6c:0f:1c:
                    c0:34:57:da:e3:f3:52:96:3f:d1:d6:71:13:df:08:
                    e1:ad:e1:e3:a6:9c:a7:8c:42:70:05:c7:d0:7d:0e:
                    ed:e4:70:1f:79:9d:44:16:39:ea:a0:fe:70:8f:9f:
                    28:46:b1:6c:10:2a:f6:c1:39:07:1e:3e:ff:59:d4:
                    2c:61:c0:64:fe:4b:b6:57:15:15:db:73:0a:2d:5f:
                    28:8e:5a:b9:a9:c0:58:15:de:c3:23:f2:94:66:5f:
                    8e:b9:0f:dd:f8:2d:5e:04:de:b7:d4:e0:a7:14:d4:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:96:30:8B:D1:D5:A0:D4:17:EE:E7:4B:35:C3:96:C3:26:06:39
            X509v3 Authority Key Identifier:
                keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b5:ec:18:0c:3f:57:38:c3:f0:4b:78:77:de:87:b6:7c:91:
         5a:74:cb:47:ff:1f:ec:37:d2:e1:fb:f4:a3:ce:e8:bc:52:37:
         2d:55:8c:ab:ee:c4:77:b1:cb:30:e6:02:ba:91:0f:56:35:f6:
         6e:a4:63:d9:aa:cb:4f:a7:bf:33:85:65:16:6d:09:4d:13:12:
         47:16:35:15:bf:38:79:2a:e0:20:1c:13:76:22:ba:82:ba:3b:
         8b:52:8c:1d:89:f7:29:26:72:f1:2a:cc:12:90:a1:f6:27:fc:
         5a:84:71:f8:12:e8:6a:23:94:c1:18:eb:8b:45:4b:39:49:9b:
         b6:67:2e:ae:85:51:2c:cc:bc:12:37:22:2f:8d:ce:8e:57:08:
         2e:30:c1:67:d0:d9:0f:c9:b2:e9:3a:02:a7:ba:9b:71:58:1a:
         60:32:c8:c9:c6:ac:d4:ca:81:f2:3e:85:3f:68:e4:d8:8c:4e:
         f4:85:a6:e1:d1:2b:41:6e:b5:a4:73:c2:af:ce:84:ff:aa:06:
         2b:1d:9d:1f:69:1f:37:3c:53:bd:49:03:b1:39:4e:6f:c4:75:
         99:60:fd:fe:a3:6d:13:a0:a4:c7:af:fd:fc:05:f5:92:2b:08:
         b5:1e:f1:66:d2:2c:59:dc:52:41:ac:6d:fc:a2:ff:c7:89:07:
         3e:51:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:03:03 2025 by rpki-client